Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/XlF89AmuNetADItat2n8AYDAmq0.roa
File: XlF89AmuNetADItat2n8AYDAmq0.roa (raw, json)
Hash identifier: kZbZevmHS5JJWg+k4E6aqQTveOvMBjAHN9QQM2jYlnI=
Subject key identifier: 5E:51:7C:F4:09:AE:35:EB:40:0C:8B:5A:B7:69:FC:01:80:C0:9A:AD
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 01856D4AC52875189BEC676DC7F2F1BFDA7A
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/XlF89AmuNetADItat2n8AYDAmq0.roa
Signing time: Sun 01 Jan 2023 12:24:54 +0000
ROA not before: Sun 01 Jan 2023 12:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50309
IP address blocks: 185.221.184.0/22 maxlen: 32
46.182.192.0/21 maxlen: 32
185.160.128.0/22 maxlen: 32
94.142.132.0/23 maxlen: 32
2a0c:1000::/29 maxlen: 32
2a0b:5e00::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 10 Jan 2023 08:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:c5:28:75:18:9b:ec:67:6d:c7:f2:f1:bf:da:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Jan 1 12:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e517cf409ae35eb400c8b5ab769fc0180c09aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:54:3e:67:b9:0f:36:60:f9:9f:9f:cc:e9:8a:
db:ed:26:49:45:32:88:88:bf:1f:40:92:e7:a4:51:
4c:a6:6e:18:ac:ce:87:5e:eb:14:0a:e9:95:7e:2a:
e3:b7:4d:22:f2:88:b9:4b:b7:29:13:77:be:28:28:
1f:01:3b:73:57:c9:27:32:f1:22:3d:bc:e1:6b:dd:
08:87:5b:aa:ee:31:ec:66:d1:be:26:4a:b0:d2:8a:
37:ee:bf:31:da:f6:8f:c4:2d:88:88:c3:f3:03:83:
6f:89:d0:c4:3d:b9:75:63:14:10:34:3f:84:a7:a7:
4d:a2:2f:80:93:1c:3a:0d:06:62:32:b4:40:c6:17:
40:a1:a5:b3:0f:78:ff:ab:6f:ef:9c:e0:1f:16:c9:
24:30:9c:be:99:90:5b:ee:33:5c:d2:38:c0:7b:8e:
14:44:70:9a:9e:a0:10:ea:e4:14:c9:f2:06:2b:3d:
5f:cf:ae:48:8a:f6:3a:92:3d:ba:3c:b7:b2:f1:af:
7d:be:b8:bd:8b:95:97:f9:82:82:11:9d:e8:f8:bc:
c8:ae:d9:64:2c:01:98:58:36:85:0f:7b:06:d1:7e:
fc:8d:31:43:1f:4d:b8:57:16:10:48:b1:11:43:f7:
53:01:7e:1d:eb:64:16:b7:ef:32:24:9c:c9:2d:39:
54:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:51:7C:F4:09:AE:35:EB:40:0C:8B:5A:B7:69:FC:01:80:C0:9A:AD
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/XlF89AmuNetADItat2n8AYDAmq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.192.0/21
94.142.132.0/23
185.160.128.0/22
185.221.184.0/22
IPv6:
2a0b:5e00::/29
2a0c:1000::/29
Signature Algorithm: sha256WithRSAEncryption
0d:fa:22:0d:7f:1d:0b:3f:9f:51:74:55:d6:3d:9a:b8:40:67:
eb:bd:4e:a7:f1:e9:7f:3e:ce:ae:98:15:a1:de:79:41:82:cd:
d8:ad:33:e2:8a:ea:fd:28:b8:24:5b:d0:87:68:2f:93:6d:5f:
bf:20:db:ab:6e:2f:c1:e4:11:c3:02:6f:22:5d:a3:92:79:18:
b4:6c:35:48:d7:75:c1:1c:e8:2e:9c:e3:5c:71:fa:02:98:c2:
ae:42:d7:d1:9f:14:9b:67:62:82:02:bd:61:08:d5:d0:7b:a5:
64:d6:5e:92:59:3a:9a:c7:a7:44:5a:95:c0:02:ec:7f:d7:e6:
79:db:88:76:6e:82:61:87:f9:d1:e1:d6:0d:1e:c5:67:97:80:
c6:5e:50:cb:7a:df:b9:04:a2:7c:7e:2a:33:c7:d5:6f:cc:a9:
6c:28:d1:17:4b:39:72:aa:3a:30:35:d3:42:9f:ff:61:9d:dd:
b9:5d:8c:bf:02:87:60:41:d6:62:55:b1:01:30:8b:c6:2b:72:
45:d2:b8:70:ae:b5:91:7f:c6:bd:19:f7:ee:ca:1e:64:df:53:
47:c5:2c:e9:ab:c9:8d:92:a2:da:b9:d7:4b:9c:a3:87:0f:99:
85:6a:25:8f:97:0a:1a:46:4b:80:58:d6:54:06:ab:fa:36:02:
9b:7e:5e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:23 2024 by rpki-client on console-fra.rpki-client.org